Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/jWjO8-wSvBOssXbwVdeDWOB3qHA.roa
File: jWjO8-wSvBOssXbwVdeDWOB3qHA.roa (raw, json)
Hash identifier: HFg6SCICEBCBfT3PeWcuYl6The082NB7uewpDCPBR9Y=
Subject key identifier: 8D:68:CE:F3:EC:12:BC:13:AC:B1:76:F0:55:D7:83:58:E0:77:A8:70
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 019F7F8607DB7B84BDD7281A975CD524CF20
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/jWjO8-wSvBOssXbwVdeDWOB3qHA.roa
Signing time: Mon 20 Jul 2026 12:35:17 +0000
ROA not before: Mon 20 Jul 2026 12:35:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40115
IP address blocks: 2a13:a5c7:3300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:86:07:db:7b:84:bd:d7:28:1a:97:5c:d5:24:cf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jul 20 12:35:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d68cef3ec12bc13acb176f055d78358e077a870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:3c:e5:ee:f8:6f:4a:6b:05:2d:81:a8:63:
49:4d:e8:f4:bd:12:56:d2:04:91:1b:37:73:7a:91:
48:ad:a1:df:cd:6a:3d:ee:44:f9:72:2a:55:bd:8b:
c4:f1:7e:87:2f:5c:d6:ff:bd:fb:50:53:18:64:85:
9e:27:9d:6b:5d:f7:65:fa:6c:a2:b3:ea:43:20:9b:
71:0b:9e:49:50:2f:97:f5:5f:fc:36:b1:9d:b9:b4:
c8:2d:a8:3e:11:54:36:e5:a1:bd:82:07:1c:eb:cb:
1b:06:12:bf:ab:10:5b:72:e6:38:52:72:f5:75:81:
92:1a:08:bf:73:7f:7f:08:16:23:50:69:a2:39:8e:
22:a4:10:4a:79:5d:43:ba:d2:82:d2:8d:d7:e0:66:
78:99:0e:c6:dc:5f:8e:79:c9:17:28:f3:97:c1:02:
d2:8d:b4:08:e4:51:3a:a0:76:97:74:58:4d:ad:34:
8b:19:18:47:1a:64:dc:7d:3c:fc:64:a3:2b:3c:e4:
ff:a0:e1:6f:a6:04:c9:7d:2b:4d:3f:22:49:85:65:
ab:4f:77:b5:bc:37:5f:52:79:73:24:47:15:29:33:
b9:4d:b8:f1:51:2f:5a:4c:e7:af:3a:7e:fb:f3:f6:
d8:1e:55:88:27:1a:33:91:58:a4:1d:ec:db:7c:9c:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:68:CE:F3:EC:12:BC:13:AC:B1:76:F0:55:D7:83:58:E0:77:A8:70
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/jWjO8-wSvBOssXbwVdeDWOB3qHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:3300::/40
Signature Algorithm: sha256WithRSAEncryption
3f:66:81:11:ab:54:45:c0:a6:cd:69:20:67:83:09:f9:62:a1:
50:26:e8:03:25:43:d2:0d:07:9e:f1:47:5b:8f:91:31:2b:8a:
97:55:36:e1:c6:2b:9e:94:84:24:d1:16:6e:20:98:a2:b5:f8:
5f:d0:d5:de:63:51:b3:db:21:46:48:ab:39:79:99:d6:75:e6:
50:7a:c7:96:09:a9:e4:8e:d4:74:57:59:a1:ce:bd:96:4b:1e:
f2:2e:b4:0c:45:60:96:f3:8a:eb:42:40:e0:a0:5a:9c:ce:8f:
24:63:07:6c:d5:d3:1e:6d:f2:6b:a5:87:3d:b0:da:f8:64:67:
c8:01:6b:5c:7f:ce:52:54:b1:c7:6b:84:94:ae:f6:f1:c6:3b:
79:d3:53:d5:08:6d:49:72:36:5b:73:81:44:cf:d2:5b:72:ff:
16:63:8d:71:7f:3a:59:58:3a:2d:a1:11:8e:60:c4:78:f1:2c:
a8:49:47:e0:64:3b:ac:a7:a9:03:f4:d4:18:3f:bf:09:36:a4:
41:f1:4f:dd:10:b6:a3:2a:cb:15:65:3d:cc:ce:7d:2e:76:a7:
b0:92:bc:74:ba:c7:b7:18:de:64:ea:bd:48:01:f9:04:67:0c:
c6:13:e8:52:0a:f2:a1:10:9a:16:e1:63:38:d5:bb:16:9e:1f:
47:5d:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:13:11 2026 by rpki-client